The passing of the eIDAS amendment marks an important milestone for EU countries and changes how they must manage digital credentials for both public services and businesses. Italy has led in adopting eIDAS, first with CIE and SPID identity schemes, and now with the Italian Wallet (IO app) aligned to eIDAS 2.0. Self-Sovereign Identity (SSI) is a decentralized model born from the success of Distributed Ledgers, giving individuals full control over their digital identity. The current eIDAS 2.0 and its implementation acts diverge from SSI principles, rendering the European Digital Identity Wallet (EUDIW) centralized and merely user-centric, prioritizing security and legal protection over true self-sovereignty. This paper proposes an architecture that enables the use of IT Wallet credentials and services in an SSI-compliant environment through Trusted Execution Environments and Zero-Knowledge Proofs.
翻译:eIDAS修正案的通过标志着欧盟国家的重要里程碑,并改变了其在公共服务和商业领域中管理数字凭证的方式。意大利在eIDAS采用方面处于领先地位,最初通过CIE和SPID身份方案,如今则推出符合eIDAS 2.0标准的意大利钱包(IO应用)。自我主权身份(SSI)是伴随分布式账本技术成功而诞生的去中心化模型,赋予个人对其数字身份的完全控制权。现行eIDAS 2.0规范及其实施方案偏离了SSI原则,导致欧洲数字身份钱包(EUDIW)呈现中心化特征,仅实现以用户为中心的设计,在安全性与法律保护层面的考量优先于真正的自我主权性。本文提出一种架构,通过可信执行环境与零知识证明技术,实现在符合SSI规范的环境中使用意大利钱包凭证及相关服务。